1000 个项目组合管理系统 MCA register.php sql 注入 (CVE-2024-11744)
CVE编号
CVE-2024-11744
利用情况
暂无
补丁情况
N/A
披露时间
2024-11-27
漏洞描述
A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
解决建议
建议您更新当前系统或软件至最新版,完成漏洞的修复。
文章评论